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Question: 1 


What are the two advantages of deploying cloud-based Cisco SD-WAN controllers? (Choose two.) 


A. centralized control and data plane 
B. distributed authentication policies 
C. management of SLA 

D. infrastructure as a service 


E. centralized raid storage of data 


Answer: CD 


Explanation: 


Question: 2 


An engineer is troubleshooting a certificate issue on vEdge. Which command is used to verify the validity 
of the certificates? 


A. show control local-properties 
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B. show control summary 
C. show certificate installed 


D. show certificate status 


Answer: A 


Explanation: 


Reference: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/command/sdwan-cr- 
book/operational-cmd#wp2835720000 


Question: 3 


What is a benefit of the application-aware firewall? 


A. It blocks traffic by MAC address 
B. It blocks traffic by MTU of the packet. 
C. It blocks traffic by application. 


D. It blocks encrypted traffic 


Answer: C 


Explanation: 


Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_zbf/configuration/xe-16- 
9/sec-data-zbf-xe-16-9-book/sec-data-zbf-xe-16-9-book_ chapter 0100100 


Question: 4 


When VPNs are grouped to create destination zone in Zone-Based Firewall, how many zones can a single 
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VPN be part of? 


A. two 
B. four 
C. one 


D. three 


Answer: C 


Explanation: 


Reference: 


https://sdwandocs.cisco.com/Product Documentation/Software Features/Release 18.4/Security/Enter 
prise_Firewall_with Application Awareness 


Question: 5 


Which attributes are configured to uniquely Identify and represent a TLOC route? 


A. system IP address, link color, and encapsulation 
B. firewall, IPS, and application optimization 
C. site ID, tag, and VPN 


D. origin, originator, and preference 


Answer: A 


Explanation: 


https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/SDWAN/CVD-SD-WAN-Design- 
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